Files
releases/server/testdata/client-key.pem
T
Stephan Renatus 3286c39822 server: add authentication based on TLS
* identifier: add TLSBased

This is only the identifier, the server setup still has to be done.

Note that it diverges a little from what was proposed in the issue:
not every client cert needs to have a CN record -- so instead, we'll
use whatever is the cert's subject as client identity.

* Drive-by fix: identifier_test: don't use same package for TokenBased
  tests.
* server: require and verify client cert for AuthenticationTLS
* server: allow setting CA pool via --tls-ca-cert-file
* server: expose new authentication via parameter
* [nit] server: simplify getListenerForHTTPServer
* server_test: use httptest for integration-y TLS tests
* book/security: mention TLS authn with example

Signed-off-by: Stephan Renatus <srenatus@chef.io>
2019-01-14 12:57:35 -08:00

28 lines
1.6 KiB
Plaintext

-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----